php - Recaptcha 未使用 file_get_contents 进行验证

Question

对为什么这不起作用感到困惑。提交表单后，我收到错误消息，这意味着我的 recaptcha 验证失败。

来 self 的表单:

<div class="g-recaptcha" data-sitekey="(site-key)"></div>

PHP:

if(isset($_POST['g-recaptcha-response'])){
      $captcha=$_POST['g-recaptcha-response'];
    }

$secretKey = "(secret-key)";
$response = file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=".$secretKey."&response=".$captcha);
$responseKeys = json_decode($response,true);
if(intval($responseKeys["success"]) === true) {
    echo '<h3>Thanks for your message!</h3>';
} else {
    echo '<h3>Error</h3>';
    }

Answer 1

reCaptcha 文档特别指定了请求 https://www.google.com/recaptcha/api/siteverify 的参数必须通过 POST 发送。您可以为此使用 CURL。

$ch = curl_init();

curl_setopt_array($ch, [
    CURLOPT_URL => 'https://www.google.com/recaptcha/api/siteverify',
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => [
        'secret' => $secretKey,
        'response' => $captcha,
        'remoteip' => $_SERVER['REMOTE_ADDR']
    ],
    CURLOPT_RETURNTRANSFER => true
]);

$output = curl_exec($ch);
curl_close($ch);

$json = json_decode($output);

// check response...